deploy MinIO (nginx mux, secrets-based root creds)

Dockerfile

@@ -0,0 +1,22 @@
+# MinIO + nginx on HF Docker Space (single exposed port 8080)
+FROM debian:bookworm-slim
+
+RUN apt-get update && \
+    apt-get install -y nginx curl && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+# MinIO binary pinned to a release that still ships the embedded console
+COPY --from=quay.io/minio/minio:RELEASE.2025-04-22T22-12-26Z /usr/bin/minio /usr/bin/minio
+
+# Root credentials come from Space Secrets at runtime:
+#   MINIO_ROOT_USER / MINIO_ROOT_PASSWORD  (do NOT hardcode here)
+
+RUN mkdir -p /data && chmod -R 777 /data
+
+COPY nginx.conf /etc/nginx/nginx.conf
+COPY index.html /usr/share/nginx/html/index.html
+
+EXPOSE 8080
+
+CMD ["sh", "-c", "minio server /data --address :9000 --console-address :9001 & nginx -g 'daemon off;'"]

README.md

@@ -1,10 +1,14 @@
 ---
-title: Ffooxx
-emoji: 🌍
-colorFrom: indigo
-colorTo: pink
+title: Minio
+emoji: ⚡
+colorFrom: yellow
+colorTo: green
 sdk: docker
 pinned: false
+short_description: S3 云存储
+app_port: 8080
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+MinIO (S3-compatible object storage) on a Hugging Face Docker Space.
+Root credentials are provided via Space Secrets (MINIO_ROOT_USER / MINIO_ROOT_PASSWORD), never in this repo.
+Data directory /data — attach a Storage Bucket mounted at /data for persistence across restarts.

index.html

@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>MinIO Service Hub</title>
+    <style>
+        :root { --primary-color: #3872ff; --bg-color: #f4f7f6; --text-color: #333; }
+        body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; text-align: center; padding: 0; margin: 0; background: var(--bg-color); display: flex; justify-content: center; align-items: center; height: 100vh; }
+        .card { background: white; padding: 40px; border-radius: 12px; box-shadow: 0 10px 25px rgba(0, 0, 0, 0.05); max-width: 400px; width: 90%; }
+        h1 { color: var(--primary-color); font-size: 24px; margin-bottom: 10px; }
+        p { color: #666; line-height: 1.6; margin-bottom: 30px; }
+        .btn { display: inline-block; padding: 12px 24px; background: var(--primary-color); color: white; text-decoration: none; border-radius: 6px; font-weight: 600; transition: background 0.3s ease; }
+        .btn:hover { background: #2956cc; }
+        .status-tag { display: inline-block; padding: 4px 12px; background: #e6fffa; color: #38a169; border-radius: 20px; font-size: 12px; font-weight: bold; margin-bottom: 20px; }
+    </style>
+</head>
+<body>
+    <div class="card">
+        <div class="status-tag">● 系统运行中</div>
+        <h1>MinIO 存储服务</h1>
+        <p>S3 API 节点已就绪。根路径为 S3 API 入口，管理请进入控制台。</p>
+        <a href="/browser/" target="_top" class="btn">进入管理控制台 (Console)</a>
+    </div>
+</body>
+</html>

nginx.conf

@@ -0,0 +1,60 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    client_max_body_size 500M;
+
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    server {
+        listen 8080;
+
+        root /usr/share/nginx/html;
+
+        # Root: welcome page for browsers, S3 API for everything else
+        location / {
+            if ($http_accept ~* "text/html") {
+                rewrite ^/$ /index.html last;
+            }
+
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_connect_timeout 300;
+            proxy_send_timeout 300;
+            proxy_read_timeout 300;
+
+            proxy_http_version 1.1;
+            proxy_set_header Connection "";
+            chunked_transfer_encoding off;
+
+            proxy_pass http://localhost:9000;
+        }
+
+        location = /index.html {
+            root /usr/share/nginx/html;
+        }
+
+        # MinIO Console
+        location /browser/ {
+            client_max_body_size 500M;
+            rewrite ^/browser/(.*) /$1 break;
+
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-NginX-Proxy true;
+
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+
+            proxy_pass http://localhost:9001/;
+        }
+    }
+}